Static task
static1
Behavioral task
behavioral1
Sample
efb23b5e3d6fbdaabb295cd397b16366_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efb23b5e3d6fbdaabb295cd397b16366_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efb23b5e3d6fbdaabb295cd397b16366_JaffaCakes118
-
Size
52KB
-
MD5
efb23b5e3d6fbdaabb295cd397b16366
-
SHA1
4540a504e9e95e3dd65d0939e98afd2b3bb7c2dc
-
SHA256
504e765849e6595991339cc560d6516617ee3a925f882ca8cdf7fdf6de039d49
-
SHA512
72e3e549eba1be26f381f8c476d53f935fa6ca3a58d90654fe3618dcc16654d9022d1c6a8308eb47def7a2ea49ecdb0e8a5ccb5103a55dfe90eabaf4f6318657
-
SSDEEP
1536:9BOqcwVOmG1VK+FhMZQlYFs0knvq6eOnPFm:HF/gmao+wXNWFm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efb23b5e3d6fbdaabb295cd397b16366_JaffaCakes118
Files
-
efb23b5e3d6fbdaabb295cd397b16366_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ffdb72c6143aa9c5054244ef78f7a13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
FindResourceA
GetConsoleOutputCP
TerminateProcess
LCMapStringW
WriteConsoleW
FileTimeToSystemTime
msvcrt
strncat
_ltoa
_controlfp
free
memmove
tolower
_wcsicmp
strcmp
_stricmp
_fullpath
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE